Skip to content
OpenAdvisories
High SSA-693975 1 CVE

SSA-693975: Denial-of-Service Vulnerability in the Web Server of Industrial Products

Published Dec 12, 2023 · Updated Mar 12, 2024 · Revision 2

Vendor: Siemens Product: SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) Product: SIMATIC CP 1243-1 (incl. SIPLUS variants) Product: SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) Product: SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) Product: SIMATIC CP 1243-7 LTE Product: SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) Product: SIMATIC CP 1543-1 (6GK7543-1AX00-0XE0) Product: SINAMICS S210 (6SL5...) Product: SIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0)

Summary

A vulnerability in the affected products could allow an unauthorized attacker with network access to the webserver of an affected device to perform a denial-of-service attack.

Siemens has released a new version for SINAMICS S210 (6SL5...) and recommends to update to the latest version. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 1

Revision history

  1. #2

    Added fixes for supported SIMATIC S7-1200 CP 1200 family, added fix version for SIMATIC CP1200 family and SIMATIC CP1500 family

  2. #1

    Publication Date

References